Privacy notice
Andrzej Werner runs AutoShop. For the details of garage staff, and of people who ask for a trial, we are the controller. For the customer records a garage keeps in AutoShop, the garage is the controller and we are its processor (see section 10 of the terms).
What we collect
- Trial requests: garage name, your name, email, phone and postcode.
- Accounts: name, email, role, a hashed password, two-factor settings, sign-in times and IP addresses (for security).
- Use of the service: searches you make (registrations, VINs, fault codes) and an audit log of changes, kept so your garage and we can see who did what.
- Garage records: customers, vehicles and notes your garage enters. We process these for the garage.
- Payments: amount, date and plan. Card details are handled by the payment provider and never reach AutoShop.
Why we use it
We use it to provide AutoShop under our contract with your garage, to keep it secure (our legitimate interests), to bill you, and to keep the accounts the law requires (legal obligation). We don't sell personal data or use it for advertising.
Who else handles it
- Oracle Cloud: hosting and nightly backups.
- Our email provider: invitations and billing emails.
- Monzo Business: taking payments.
- DVSA and DVLA: when you look up a registration, the registration is sent to them. No customer names are sent.
- AI providers (Anthropic, OpenAI, xAI or Google): only if your garage chooses one for the assistant. Your question and the AutoShop data needed to answer it are sent to that provider. The built-in assistant sends nothing outside AutoShop.
How long we keep it
We keep account and garage data while your garage uses AutoShop, then delete it within 30 days of leaving. Sign-in attempts are kept for 7 days and backups for 30 days. Payment records are kept for 6 years, as tax law requires.
Cookies
AutoShop uses only the cookies it needs to work: your sign-in session and form protection. There are no tracking or advertising cookies. The fonts are loaded from Google Fonts.
Your rights
You can ask to see, correct or delete your personal data, to object to how it's used, or to get a copy of it. Email us. If you're a garage's customer, ask the garage first, since they control your record. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).